We have two networks. 192.168.0.0/24 and 10.0.0.0/24. We have DNS functioning fine on the 192 subnet, but no DNS on the 10 subnet. I think this is causing us authentication/logon issues because more often then not I get a "Windows cannot contact a logon server to authenticate" blah blah...
What I'm thinking to resolve the logon server is to create an independant DNS server on the 10 side (The DC for the 10 side has a NIC in both networks). What I DON"T want to do, is replicate or (and this is the key) have internet access. There is to be no name resolution on the 192 side of the network.
This is running W2k3 R2 x64 if this helps. I have just installed the DNS role but I'm not sure how best to configure DNS to prevent replication or internet access.
There is no DHCP either (and is required to remain static)
At the moment and DNS resolution that is needed is on client side hosts files (there is only 9 clients, 2 servers on this network)